CVE-2026-26354
EUVD-2026-2505022.04.2026, 19:17
Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.60, contain a stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| dell | powerprotect_dp_series_appliance | 𝑥 < 2.7.9 |
| dell | data_domain_operating_system | 7.7.1.0 ≤ 𝑥 < 7.13.1.60 |
| dell | data_domain_operating_system | 7.14.0.0 ≤ 𝑥 < 8.3.1.20 |
| dell | data_domain_operating_system | 8.4.0.0 ≤ 𝑥 < 8.6.1.10 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-121 - Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.